$ rpki-client -vvf rpki-rsync.idnic.net/repo/7467ec33-5a72-4c65-9fd3-66ef8479394d/0/C352DFD797F0814103500130B1A6B6876355C3DF.mft File: C352DFD797F0814103500130B1A6B6876355C3DF.mft (raw, json) Hash identifier: Zqueb7f/TtctfT8hUu9t+P81QkLdjrjExInguIbokc0= Subject key identifier: C8:FB:37:64:7E:65:03:28:89:12:6C:0E:6B:1B:90:93:50:4D:EC:04 Authority key identifier: C3:52:DF:D7:97:F0:81:41:03:50:01:30:B1:A6:B6:87:63:55:C3:DF Certificate issuer: /CN=C352DFD797F0814103500130B1A6B6876355C3DF Certificate serial: 3FB86D483AEA6A576BFFBC2AF03FAFBB2DDB65E7 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/C352DFD797F0814103500130B1A6B6876355C3DF.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/7467ec33-5a72-4c65-9fd3-66ef8479394d/0/C352DFD797F0814103500130B1A6B6876355C3DF.mft Manifest number: 0F Signing time: Tue 12 May 2026 21:39:25 +0000 Manifest this update: Tue 12 May 2026 21:34:25 +0000 Manifest next update: Thu 14 May 2026 01:05:25 +0000 Files and hashes: 1: 3130332e3138382e3234392e302f32342d3234203d3e20313439393038.roa (hash: zyRn7jFyehFEgsKHr+RevPoVMdyoLH00YGiqg3O4fKo=) 2: C352DFD797F0814103500130B1A6B6876355C3DF.crl (hash: ThrzyXTEq6U1+7HjAJr/PHenfHzdvzkIFhZS/65BDeM=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/7467ec33-5a72-4c65-9fd3-66ef8479394d/0/C352DFD797F0814103500130B1A6B6876355C3DF.crl rsync://rpki-rsync.idnic.net/repo/7467ec33-5a72-4c65-9fd3-66ef8479394d/0/C352DFD797F0814103500130B1A6B6876355C3DF.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/C352DFD797F0814103500130B1A6B6876355C3DF.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 13 May 2026 09:32:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3f:b8:6d:48:3a:ea:6a:57:6b:ff:bc:2a:f0:3f:af:bb:2d:db:65:e7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=C352DFD797F0814103500130B1A6B6876355C3DF Validity Not Before: May 12 21:34:25 2026 GMT Not After : May 14 01:05:25 2026 GMT Subject: CN=C8FB37647E65032889126C0E6B1B9093504DEC04 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d3:40:96:ce:f5:7f:da:7d:9e:d9:60:68:5f:04: f6:68:cd:f2:b0:15:58:e0:e6:49:7d:f6:1e:e2:1e: 4e:ba:a2:5d:7b:a5:16:e5:6d:f4:77:c9:81:d7:ef: c9:ea:fc:b2:64:db:d5:9b:b8:e5:d6:09:e4:e1:cc: 75:7a:5e:eb:d0:dc:c4:b8:fe:c9:34:90:6f:12:70: 26:65:90:0f:7d:ef:fb:3a:8c:7f:04:e5:3f:9c:79: b4:a1:d9:3a:08:f6:f7:eb:b6:6a:ba:0f:1a:49:ab: 3a:67:8f:78:47:a8:36:56:af:a6:fa:c0:df:4d:6d: 27:96:c9:f5:9d:11:a0:df:07:be:a2:cd:70:3e:e7: dc:ba:7c:ce:ee:60:bb:6d:79:88:d1:97:0d:6f:c4: 13:7e:10:6c:f9:c1:ea:b4:a6:6b:19:24:5d:de:0a: e4:4c:02:30:5f:7a:ef:5e:0e:87:fe:5d:54:12:36: 98:04:70:5e:44:3c:7e:2f:b1:1b:f7:1d:2e:07:4c: c8:b8:90:e1:9a:9a:ea:6d:d7:3a:26:5d:6d:f8:91: cb:b6:ed:33:5e:67:6f:c8:5e:be:bb:3f:fd:e4:1a: 05:df:11:5a:9c:92:d8:fa:78:c6:67:27:3a:83:64: 28:1d:e4:83:95:be:ad:8f:7c:71:78:c2:73:89:f9: a8:ad Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C8:FB:37:64:7E:65:03:28:89:12:6C:0E:6B:1B:90:93:50:4D:EC:04 X509v3 Authority Key Identifier: keyid:C3:52:DF:D7:97:F0:81:41:03:50:01:30:B1:A6:B6:87:63:55:C3:DF X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/7467ec33-5a72-4c65-9fd3-66ef8479394d/0/C352DFD797F0814103500130B1A6B6876355C3DF.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/C352DFD797F0814103500130B1A6B6876355C3DF.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/7467ec33-5a72-4c65-9fd3-66ef8479394d/0/C352DFD797F0814103500130B1A6B6876355C3DF.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 05:cf:4c:23:1a:6d:12:04:f0:16:75:be:ef:58:83:54:44:c7: bc:9e:2f:8a:2b:d2:a4:c9:9d:5e:51:89:48:9c:b9:c6:3f:94: 83:06:d0:51:e4:78:4d:75:53:a4:21:59:78:e9:c3:9d:62:4b: 87:ca:45:2c:a6:1d:e6:d8:af:ad:dc:99:47:9a:c9:96:a2:a4: ac:d3:89:89:cf:e1:18:ec:3d:76:bc:01:ce:cf:c9:e9:af:c1: d2:4c:1e:9b:58:5a:70:b7:fb:95:b0:67:b3:96:b6:7a:f6:54: e4:bf:b2:cd:cc:f9:c9:1e:74:a8:c5:35:b8:e6:12:38:ac:c2: 85:e2:8f:17:ea:34:ee:98:3a:f6:5f:3c:9d:0e:18:01:f4:6a: ed:b2:1c:9c:e4:a6:74:9a:95:01:15:e6:a4:da:c8:05:46:b9: 72:48:63:d7:85:eb:a0:00:22:a3:63:25:ce:58:30:ba:a6:92: d5:e1:99:b8:2f:00:77:97:2e:49:b4:41:32:7d:69:8e:f0:7b: 3d:23:11:d4:43:f3:19:6e:bd:c1:d8:3b:4a:f0:3c:9f:ab:62: aa:ec:f1:4c:b2:d0:e8:17:fd:09:6b:e4:06:ea:93:a4:68:a7: 21:63:c5:b8:20:54:42:66:e3:f7:9f:30:39:83:31:6b:c4:ba: 64:b0:d8:7e -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUP7htSDrqaldr/7wq8D+vuy3bZecwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQzM1MkRGRDc5N0YwODE0MTAzNTAwMTMwQjFBNkI2ODc2 MzU1QzNERjAeFw0yNjA1MTIyMTM0MjVaFw0yNjA1MTQwMTA1MjVaMDMxMTAvBgNV BAMTKEM4RkIzNzY0N0U2NTAzMjg4OTEyNkMwRTZCMUI5MDkzNTA0REVDMDQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDTQJbO9X/afZ7ZYGhfBPZozfKw FVjg5kl99h7iHk66ol17pRblbfR3yYHX78nq/LJk29WbuOXWCeThzHV6XuvQ3MS4 /sk0kG8ScCZlkA997/s6jH8E5T+cebSh2ToI9vfrtmq6DxpJqzpnj3hHqDZWr6b6 wN9NbSeWyfWdEaDfB76izXA+59y6fM7uYLtteYjRlw1vxBN+EGz5weq0pmsZJF3e CuRMAjBfeu9eDof+XVQSNpgEcF5EPH4vsRv3HS4HTMi4kOGamupt1zomXW34kcu2 7TNeZ2/IXr67P/3kGgXfEVqcktj6eMZnJzqDZCgd5IOVvq2PfHF4wnOJ+aitAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUyPs3ZH5lAyiJEmwOaxuQk1BN7AQwHwYDVR0j BBgwFoAUw1Lf15fwgUEDUAEwsaa2h2NVw98wDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v NzQ2N2VjMzMtNWE3Mi00YzY1LTlmZDMtNjZlZjg0NzkzOTRkLzAvQzM1MkRGRDc5 N0YwODE0MTAzNTAwMTMwQjFBNkI2ODc2MzU1QzNERi5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9DMzUyREZENzk3RjA4MTQxMDM1MDAxMzBCMUE2QjY4NzYzNTVD M0RGLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vNzQ2N2VjMzMtNWE3Mi00YzY1LTlm ZDMtNjZlZjg0NzkzOTRkLzAvQzM1MkRGRDc5N0YwODE0MTAzNTAwMTMwQjFBNkI2 ODc2MzU1QzNERi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAAXPTCMabRIE8BZ1vu9Yg1REx7yeL4or0qTJ nV5RiUicucY/lIMG0FHkeE11U6QhWXjpw51iS4fKRSymHebYr63cmUeayZaipKzT iYnP4RjsPXa8Ac7PyemvwdJMHptYWnC3+5WwZ7OWtnr2VOS/ss3M+ckedKjFNbjm EjiswoXijxfqNO6YOvZfPJ0OGAH0au2yHJzkpnSalQEV5qTayAVGuXJIY9eF66AA IqNjJc5YMLqmktXhmbgvAHeXLkm0QTJ9aY7wez0jEdRD8xluvcHYO0rwPJ+rYqrs 8Uyy0OgX/Qlr5Abqk6RopyFjxbggVEJm4/efMDmDMWvEumSw2H4= -----END CERTIFICATE-----Generated at Wed May 13 00:43:35 2026 by rpki-client